This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft File: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft (raw, json) Hash identifier: 1jI5tF/Z5RAKy6469nq5hUYV6e+cwVeKLY1q80lMvqQ= Subject key identifier: 81:19:52:36:FA:EF:80:AA:3D:B1:30:A3:A6:B0:E0:5D:9C:2B:9C:08 Authority key identifier: F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 Certificate issuer: /CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Certificate serial: 3895E94EA127F20E8F9CA9FCFFF7CADA288B6196 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft Manifest number: 03D7 Signing time: Fri 23 Jan 2026 22:12:10 +0000 Manifest this update: Fri 23 Jan 2026 22:07:10 +0000 Manifest next update: Tue 27 Jan 2026 08:21:10 +0000 Files and hashes: 1: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: /hqFM8bn3tDhrg+XA2pNRGjXcuItTuse0QHD782i5/Q=) 2: F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl (hash: /EOkQ61uRUBSv1Iv31z6MR6tcgx4YZTDDFr+2KiGRr4=) 3: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: nH/6GtgoV/9v3sMWYjneb+fyVV81krMAog9BySpXr4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Jan 2026 08:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:95:e9:4e:a1:27:f2:0e:8f:9c:a9:fc:ff:f7:ca:da:28:8b:61:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2CC4B38295BA8B211B55A53DA0ACB76DA636E70 Validity Not Before: Jan 23 22:07:10 2026 GMT Not After : Jan 27 08:21:10 2026 GMT Subject: CN=81195236FAEF80AA3DB130A3A6B0E05D9C2B9C08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:18:01:24:81:71:5b:70:e2:d8:dd:10:fd:16: e0:67:4d:84:41:d9:80:5e:c7:f4:2d:e7:13:f1:08: 29:74:c9:b3:47:30:d1:7e:c4:73:9b:e5:9c:7c:5c: d2:e0:cf:8c:b5:d7:3f:ea:7b:1d:a2:48:32:d1:a4: 37:6e:72:b5:4c:c1:25:3c:b1:29:f1:1d:4b:e0:a2: 9a:89:fa:5b:a1:3c:4b:bd:c6:8e:6e:1f:82:fd:0a: f1:bc:ab:a7:b2:47:e7:f2:93:a2:a0:5c:47:31:65: 6a:ba:de:cf:e9:f1:b6:6b:09:d7:9b:38:ab:73:e9: 70:0e:e2:a1:6e:8b:d5:78:84:92:f9:8f:6d:7e:23: 2e:6a:9a:47:b6:c3:7d:e9:d0:a6:97:a2:76:16:68: 03:53:0d:cd:52:e8:03:82:b8:06:21:c4:28:e2:9d: c4:1d:e4:2f:77:85:0e:c1:d7:d3:21:71:3a:35:42: 3c:bc:18:69:10:74:94:24:ed:fe:89:33:01:17:41: 17:f3:e8:0a:53:ad:2a:52:a9:2a:18:f7:3b:d6:3a: 1a:91:dc:02:6a:19:e3:7d:a6:c8:68:df:cc:a8:db: 64:60:2a:ab:39:a1:cf:f3:01:22:88:e6:22:eb:ed: 33:4a:7a:99:60:cd:2a:d3:ca:e0:99:76:25:4f:0f: 98:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:19:52:36:FA:EF:80:AA:3D:B1:30:A3:A6:B0:E0:5D:9C:2B:9C:08 X509v3 Authority Key Identifier: keyid:F2:CC:4B:38:29:5B:A8:B2:11:B5:5A:53:DA:0A:CB:76:DA:63:6E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/F2CC4B38295BA8B211B55A53DA0ACB76DA636E70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:73:1b:e1:e6:46:27:74:91:36:8a:31:b6:8c:a0:da:8b:74: 00:60:34:7b:a6:27:76:4f:7f:10:32:13:ad:95:2c:ee:96:8b: 7f:a9:8b:83:98:d0:b4:13:8f:2c:84:9a:31:1c:78:20:8e:9a: 35:fb:0b:51:c0:c4:ad:d5:a6:39:34:7b:28:c9:f9:54:8e:bc: fa:b3:3c:01:8e:ba:9a:ab:ea:44:d2:7d:ef:16:b8:c9:c9:b9: 2b:66:f5:65:9f:3b:c7:75:4d:1a:c3:92:74:4b:ec:23:81:13: d2:82:4e:e5:37:ab:cd:ae:8d:ac:b6:e1:b5:e4:2c:69:3a:38: e0:83:b6:84:fb:6d:4f:65:d7:d3:12:c5:e1:17:f8:0b:2d:c3: 6d:bf:53:fc:3b:58:76:68:a7:7d:b5:e1:68:4c:c7:3e:4f:1d: 11:f7:47:4f:e5:2c:f5:fa:e1:5b:4b:9f:8a:4e:f3:0e:0d:39: 05:b2:82:eb:e9:25:f8:cd:24:aa:f5:35:09:f7:90:85:7f:2b: fd:99:61:5a:36:b5:56:46:b3:65:9f:f3:dd:a9:dc:ec:cc:72: dc:e7:25:a9:e7:3f:4c:bb:f0:7e:56:73:70:2d:7e:36:72:d9: 2c:f9:7e:df:b1:33:3d:4a:ee:c8:fd:74:9c:67:a4:e4:03:9c: 0a:f5:79:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJXpTqEn8g6PnKn8//fK2iiLYZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZE QTYzNkU3MDAeFw0yNjAxMjMyMjA3MTBaFw0yNjAxMjcwODIxMTBaMDMxMTAvBgNV BAMTKDgxMTk1MjM2RkFFRjgwQUEzREIxMzBBM0E2QjBFMDVEOUMyQjlDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDGAEkgXFbcOLY3RD9FuBnTYRB 2YBex/Qt5xPxCCl0ybNHMNF+xHOb5Zx8XNLgz4y11z/qex2iSDLRpDducrVMwSU8 sSnxHUvgopqJ+luhPEu9xo5uH4L9CvG8q6eyR+fyk6KgXEcxZWq63s/p8bZrCdeb OKtz6XAO4qFui9V4hJL5j21+Iy5qmke2w33p0KaXonYWaANTDc1S6AOCuAYhxCji ncQd5C93hQ7B19MhcTo1Qjy8GGkQdJQk7f6JMwEXQRfz6ApTrSpSqSoY9zvWOhqR 3AJqGeN9psho38yo22RgKqs5oc/zASKI5iLr7TNKeplgzSrTyuCZdiVPD5hzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgRlSNvrvgKo9sTCjprDgXZwrnAgwHwYDVR0j BBgwFoAU8sxLOClbqLIRtVpT2grLdtpjbnAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDI5M2M2NC1lYTAwLTQxM2YtOTA5MC0yYjE5MGIxYTQ1YWYvMC9GMkNDNEIzODI5 NUJBOEIyMTFCNTVBNTNEQTBBQ0I3NkRBNjM2RTcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNCNzZEQTYz NkU3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvRjJDQzRCMzgyOTVCQThCMjExQjU1QTUzREEwQUNC NzZEQTYzNkU3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElzG+HmRid0kTaKMbaMoNqLdABgNHumJ3ZP fxAyE62VLO6Wi3+pi4OY0LQTjyyEmjEceCCOmjX7C1HAxK3Vpjk0eyjJ+VSOvPqz PAGOupqr6kTSfe8WuMnJuStm9WWfO8d1TRrDknRL7COBE9KCTuU3q82ujay24bXk LGk6OOCDtoT7bU9l19MSxeEX+Astw22/U/w7WHZop3214WhMxz5PHRH3R0/lLPX6 4VtLn4pO8w4NOQWyguvpJfjNJKr1NQn3kIV/K/2ZYVo2tVZGs2Wf892p3OzMctzn JannP0y78H5Wc3AtfjZy2Sz5ft+xMz1K7sj9dJxnpOQDnAr1eSU= -----END CERTIFICATE-----Generated at Sun Jan 25 20:33:19 2026 by rpki-client